PT-2023-22140 · Samsung · Exynos Modem 5300+3

Published 2023-05-09 · Updated 2023-05-15 · CVE-2023-29092

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AC:L/AV:P/A:L/C:L/I:N/PR:L/S:U/UI:R

Name of the Vulnerable Software and Affected Versions Exynos Mobile Processor and Modem versions for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080

Description An issue was discovered due to improper handling of parameters while binding a network interface, which can cause binding of a wrong resource.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-732

CWE-755

Related Identifiers

CVE-2023-29092

Affected Products

Exynos 1080

Exynos 980

Exynos Modem 5123

Exynos Modem 5300

References · 2

• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-29092 · Security Note